Network Working Group L. Dondeti, Ed. 


Request for Comments: 5159 QUALCOMM, Inc. 
Category: Informational A. Jerichow 
Nokia Siemens Networks 

March 2008 


Session Description Protocol (SDP) Attributes for 
Open Mobile Alliance (OMA) Broadcast (BCAST) 
Service and Content Protection 


Status of This Memo 


This memo provides information for the Internet community. It does 
not specify an Internet standard of any kind. Distribution of this 
memo is unlimited. 


Abstract 


This document provides descriptions of Session Description Protocol 
(SDP) attributes used by the Open Mobile Alliance’s Broadcast Service 
and Content Protection specification. 
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Introduction 


The Open Mobile Alliance (OMA) Broadcast (BCAST) group is specifying 
service and content protection mechanisms for broadcast services over 
wireless networks. As part of that specification, several new SDP 
attributes are necessary to allow the broadcast server to signal the 
service and content protection parameters to clients. 


Section 8.2.4 of RFC 4566 [1] requires that new SDP attributes are 
registered through IANA with name, contact information, and 
description (and other similar parameters). A standards track 
specification is RECOMMENDED if the new attribute(s) will have 
widespread use and interoperability considerations. 

OMA BCAST specifications are expected to be used by broadcast 
wireless systems that are based on 3rd Generation Partnership Project 
(3GPP) Multimedia Broadcast/Multicast Service (MBMS), 3GPP2 Broadcast 
and Multicast Services (BCMCS), and Digital Video Broadcasting - 
Handheld (DVB-H). Although this would typically be considered a 
"widespread" use, in this case IETF chose to use a non-standards- 
track RFC to register the SDP attributes because OMA maintains change 
control of the documents that specify the interpretation of the 
values in the attributes. 


This document provides descriptions of the SDP attributes used in the 
OMA BCAST Service and Content Protection specification [2]. 


Terminology 

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", “SHALL NOT", 
"SHOULD", “SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this 
document are to be interpreted as described in RFC 2119 [3]. 

New SDP Attributes 

The following new SDP attributes have been specified: 

o a=bcastversion:<major>.<minor> 

o a=stkmstream:<id of the stkm stream> 

Oo a=SRTPAuthentication:<id for SRTP authentication algorithm value> 


o a=SRTPROCTxRate:<ROC transmission rate> 


See Section 5 for details on IANA considerations. 
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Security Considerations 


In addition to the notes in Section 7 of RFC 4566 [1], the following 
considerations may be applicable: 


The bcastversion parameter indicates the version of the broadcast 
system used for distribution of broadcast content. In case future 
versions indicated by this parameter allow for enhanced or additional 
security features, the bcastversion parameter, if unprotected, could 
be utilized for downgrade attacks. 


The stkmstream parameter provides references to relevant key 
management streams so that receivers can map the media streams to key 
streams and retrieve the necessary keys to decrypt media. As such, 
this parameter could be utilized, if unprotected, for denial-of- 
service (DoS) attacks. 


IANA Considerations 


Per this document, which follows the guidelines of [5], IANA has 
registered a number of SDP attributes. 


.1. Registration of New SDP Attributes 


IANA has registered a number of OMA BCAST only attributes in the 
Session Description Protocol Parameters registry [1]. The 
registration data, according to RFC 4566 [1] follows. 


The registration templates below refer to the OMA-TS- 
BCAST_SvcCntProtection specification [2]. 


.1.1. Registration of the Attribute bcastversion:<major>.<minor> 


Contact: Anja Jerichow <anja.jerichow@nsn.com> 
Phone: +49 89 636-45868 

Attribute name: bcastversion 

Long-form attribute name: BCAST version 

Type of attribute: session level 


This attribute is not dependent on charset. 
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Purpose: This attribute specifies the OMA BCAST version 
"bcastversion" value in the format x.y. 


Specification of attribute values: This attribute has a mandatory 
value of the form <major>.<minor>, where <major> and <minor> are 
non-negative decimal numbers. The att-value field is of XML data 
type decimal. For details, see OMA-TS-BCAST_SvcCntProtection, 
Section 10.1.1. 

5.1.2. Registration of the Attribute stkmstream:<id of the stkm stream> 


Contact: Anja Jerichow <anja.jerichow@nsn.com> 


Phone: +49 89 636-45868 


Attribute name: stkmstream 
Long-form attribute name: Short Term Key Message stream identifier 
Type of attribute: session level or media level 


The attribute can be at session level, in which case it applies to 
all media streams, or it can be at media level, in which case it 
only applies to the specified media and would overwrite possible 
session-level attributes. 


This attribute is not dependent on charset. 


Purpose: The stkmstream attribute specifies the mapping of Short 
Term Key Message streams to media streams in the SDP. 


Each session or media stream can have multiple stkmstream 
attributes. By comparing the value of this attribute with the 
identifier of each STKM stream, the terminal can figure out which 
one to listen to and process. We note that this attribute is 
optional and hence would not be there for unencrypted media 
streams. 


Specification of attribute values: This attribute has a mandatory 
value of the form <id of the stkm stream>, a unique non-zero 
integer identifying a particular key stream. Numbers are unique 
within a particular SDP session, i.e., no global numbering is 
required. The att-value field is of XML data type unsignedShort. 
For details, see OMA-TS-BCAST_SvcCntProtection, Section 10.1.3. 
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5.1.3. Registration of the Attribute SRTPAuthentication:<id for SRTP 
authentication algorithm value> 
Contact: Anja Jerichow <anja.jerichow@nsn.com> 
Phone: +49 89 636-45868 
Attribute name: SRTPAuthentication 


Long-form attribute name: SRTP authentication algorithm value 
identifier 


Type of attribute: media level 
This attribute is not dependent on charset. 


Purpose: When SRIP is used, the attribute SRTPAuthentication states 
which authentication algorithm to use. 


Specification of attribute values: Based on [4], the identifier is a 
transform-independent parameter of the cryptographic context for 
SRIP in integer format. 

One of the following three integrity transforms registered for the 
three modes MUST be used: value "2" for RCCml, "3" for RCCm2, and 
"4" for RCCm3. For details, see OMA-TS-BCAST_SvcCntProtection, 
Section 10.4. 


5.1.4. Registration of the Attribute SRTPROCTxRate:<ROC transmission 
rate> 


Contact: Anja Jerichow <anja.jerichow@nsn.com> 
Phone: +49 89 636-45868 
Attribute name: SRTPROCTxRate 
Long-form attribute name: ROC transmission rate 
Type of attribute: media level 

This attribute is not dependent on charset. 


Purpose: When SRIP is used, the attribute SRTPROCTxRate defines the 
ROC transmission rate, R. 
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Specification of attribute values: The attribute value MUST be a 
decimal integer R between 1 and 65535 inclusive, as specified in 
[4]. If the ROC transmission rate is not included in the 
negotiation, the default value of 1 SHALL be used. For details, 
see OMA-TS-BCAST_SvcCntProtection, Section 10.4. 
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